Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/xxTvKhVXKpJ4QaGDnOujoOyZhC8.roa
File: xxTvKhVXKpJ4QaGDnOujoOyZhC8.roa (raw, json)
Hash identifier: qoNRIQhgS4Zhx4AbHmBVgjyF4A17BGXMNsRC//grOno=
Subject key identifier: C7:14:EF:2A:15:57:2A:92:78:41:A1:83:9C:EB:A3:A0:EC:99:84:2F
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D21A66DA281CFF596918125090C31F41C
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/xxTvKhVXKpJ4QaGDnOujoOyZhC8.roa
Signing time: Fri 19 Jan 2024 12:16:11 +0000
ROA not before: Fri 19 Jan 2024 12:16:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:21:a6:6d:a2:81:cf:f5:96:91:81:25:09:0c:31:f4:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 19 12:16:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c714ef2a15572a927841a1839ceba3a0ec99842f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:12:7d:ab:09:46:f2:0e:3f:dd:c5:e1:2d:66:
48:b6:cc:ea:e7:68:a1:8b:2d:4e:1f:bf:61:3a:e1:
a9:b7:f4:47:46:e4:2d:01:2d:88:07:cc:3b:4a:7e:
70:c2:c5:08:3a:cb:32:47:6a:30:5a:5b:31:da:ee:
4c:c5:36:b9:10:35:05:4b:6e:35:51:d9:cc:33:0d:
45:e7:6f:72:68:9c:be:8c:e9:c1:05:14:a9:b8:c5:
69:a3:43:36:d7:a6:a2:aa:98:29:02:8f:bc:3e:d3:
9d:f9:f4:ca:a9:dc:ea:b1:74:13:d9:b0:82:ae:f1:
42:1f:6a:15:38:c3:8e:66:30:5f:e3:52:e5:7b:16:
e1:6a:6e:84:dc:6f:51:a2:69:e6:96:d3:f5:49:59:
cd:45:9d:0e:4d:fd:af:04:c7:ca:bf:c5:a2:c5:68:
87:97:e8:3a:f7:45:27:bc:09:74:2a:5f:49:42:ec:
a5:58:a1:19:2c:96:49:97:1e:27:0b:a6:f5:1a:73:
09:dc:b9:01:bd:7d:d0:8e:f6:8b:36:80:3f:04:5f:
5d:f5:6f:d6:00:1f:6b:29:7b:7a:23:3e:08:c2:d1:
78:05:d2:2f:9f:fc:56:bd:61:31:83:9c:50:5d:03:
ee:80:c7:6f:ad:00:ba:2a:71:c0:31:9a:e4:be:fb:
83:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:14:EF:2A:15:57:2A:92:78:41:A1:83:9C:EB:A3:A0:EC:99:84:2F
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/xxTvKhVXKpJ4QaGDnOujoOyZhC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
41:a4:3c:0d:44:ae:2a:5f:5e:1f:6b:44:de:c5:96:f4:ed:b8:
f0:33:d4:81:85:b0:f9:02:11:7e:10:5a:4e:2e:13:a3:e8:01:
e8:73:6e:36:9e:2d:cf:81:f4:bb:41:6c:e1:ab:21:f1:01:84:
aa:40:b2:06:b5:7c:e7:76:e9:71:bd:71:8b:3d:78:23:54:2c:
03:ce:6d:32:2f:d4:63:0b:10:3b:fe:42:30:23:f9:cd:96:3f:
f0:8e:4a:2c:ae:a9:64:74:f5:dd:ac:9d:78:31:c2:ec:97:73:
db:c8:67:99:fd:d1:86:eb:a3:53:fe:81:73:0a:93:1d:7e:b6:
06:67:eb:19:ae:c8:f6:c0:e7:b8:41:ff:80:a0:33:35:ab:dc:
f9:ba:48:08:3e:4e:a3:25:52:21:51:ad:3f:94:07:f0:84:78:
8a:1c:79:2f:6e:95:45:a1:4e:be:3a:7a:86:06:d1:70:09:9d:
79:46:31:3e:3e:26:cd:2e:cc:e9:e9:19:a7:a4:59:b0:08:19:
69:2b:2d:9c:1f:ad:31:b0:3e:12:d4:2f:7c:74:91:9a:b3:68:
fb:22:7a:be:a2:62:8e:d0:22:63:88:2b:28:41:72:ca:a7:92:
12:2a:05:0c:d9:d5:83:98:c7:9d:2f:cf:33:da:6f:f3:98:45:
1d:1c:94:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:46:16 2025 by rpki-client